Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
File: g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft (raw, json)
Hash identifier: KcyIp9x7DdwXuxKbJ+y7uqMirIjJ6duv8h2dkXXSe9s=
Subject key identifier: BE:E5:92:A8:B1:47:2F:AE:B3:BF:35:AB:CF:DF:FC:C9:70:41:24:8F
Authority key identifier: 83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
Certificate issuer: /CN=83608851202328dce5fc01bf9dd292520530d9fe
Certificate serial: 019D3752779F7B664FF486AE9EA1DBED3451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
Manifest number: 083A
Signing time: Sun 29 Mar 2026 02:00:44 +0000
Manifest this update: Sun 29 Mar 2026 02:00:44 +0000
Manifest next update: Mon 30 Mar 2026 02:00:44 +0000
Files and hashes: 1: Ya4-DOHb6IMAOxmkcETIsWTPCOg.roa (hash: u4TLCuqpTYyL9fIrK/kr+oWhEP1P1uyD8bPrTE+F3k0=)
2: g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl (hash: 1T6106TP/VCqwIhiSsu2CSpouGCnt/xI0vn6Z7wlMFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:77:9f:7b:66:4f:f4:86:ae:9e:a1:db:ed:34:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83608851202328dce5fc01bf9dd292520530d9fe
Validity
Not Before: Mar 29 02:00:44 2026 GMT
Not After : Mar 30 02:00:44 2026 GMT
Subject: CN=bee592a8b1472faeb3bf35abcfdffcc97041248f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fa:7e:c8:9e:91:ce:79:ab:35:ff:37:6c:f6:
38:cd:19:59:a2:8e:af:30:a2:15:e4:cb:49:2b:ee:
4e:ca:b4:94:c6:8f:04:2e:73:52:1f:52:1b:12:74:
35:38:d0:13:5b:42:a5:05:35:b7:9c:02:49:f3:ad:
1d:c2:43:be:a0:37:d8:19:c2:00:8d:8f:3a:50:4c:
8e:dd:f6:91:36:b8:d4:48:be:5d:2e:96:61:9c:07:
49:e1:ae:c9:8c:3a:94:38:3b:5b:dc:43:b1:60:61:
f1:81:d9:e4:f0:c2:93:11:fb:0b:42:b3:cb:4e:5c:
98:a4:59:6c:46:19:8f:b4:7f:6a:41:bc:ad:bd:8c:
64:5b:23:95:77:e5:dc:c4:5c:e9:b4:15:7d:cc:44:
cc:ac:18:ab:08:24:46:93:47:6e:34:30:eb:12:16:
73:7c:e3:11:e6:ab:00:b4:f6:86:b3:40:b0:53:16:
7c:13:aa:aa:ca:a6:2a:07:a7:c5:5a:bc:3b:07:3a:
57:41:3d:8a:55:8f:0b:1b:fd:fa:19:fd:61:8e:e4:
c0:6f:16:90:2d:3f:76:87:0b:11:9c:03:1f:fb:30:
45:50:13:b5:e2:f6:93:5c:bb:74:d7:0b:22:80:65:
7b:86:f6:2f:ce:be:e6:61:eb:fd:69:4f:72:a2:9a:
de:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E5:92:A8:B1:47:2F:AE:B3:BF:35:AB:CF:DF:FC:C9:70:41:24:8F
X509v3 Authority Key Identifier:
keyid:83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d9:e8:07:41:a7:05:d7:8b:1e:c6:ea:d6:38:1c:c0:6f:97:
c1:ed:d3:07:15:ee:e6:df:d5:dc:f8:87:57:81:cd:67:b6:67:
c1:82:4e:7b:d9:a9:2b:27:73:21:e1:37:ca:5a:8b:38:ae:f7:
73:15:60:ec:1d:30:3a:b6:e3:b8:38:64:27:34:b2:14:e1:95:
ea:14:62:75:2a:00:1b:e8:30:00:44:b4:cd:80:f4:d3:42:c7:
68:17:52:12:32:06:f9:b7:3a:76:38:f3:3e:7f:3b:e7:82:8f:
8c:35:ff:8c:c4:39:df:2a:2b:3b:55:f4:f8:43:90:fc:a5:04:
81:f0:cd:ff:fe:01:aa:11:34:bd:19:d1:e1:e5:cd:e5:f8:34:
bd:cb:cf:8c:34:6f:61:e6:0e:12:db:bb:6b:25:f8:40:99:ed:
44:8f:48:d5:af:b1:d6:c0:09:11:d4:c9:4f:e0:dc:4e:3c:a0:
a2:3e:5f:53:e9:9f:48:c0:14:76:87:22:48:72:31:18:e9:82:
31:89:fe:51:87:03:f4:73:aa:5a:cc:17:31:9c:71:ad:77:0a:
49:ec:ac:88:cb:e1:7f:f1:d5:67:25:20:b0:44:da:8b:4a:8f:
e7:f8:b9:ce:3e:13:ea:c2:9e:45:36:4e:e5:bb:0f:7c:80:f3:
8a:19:dd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:09 2026 by rpki-client